Google’s new Android sideloading rules are live — and here are all the ways to already bypass them

Google’s plan to tighten the reins on Android sideloading has officially taken effect, with developer verification rules now rolling out across Brazil, Indonesia, Singapore, and Thailand. Certified Android devices running Google Play Services now actively block unverified app packages by default in these regions, with a wider global rollout on the cards for 2027. Now that the system is live on users’ devices, community reports are flowing in, exposing the real-world friction these changes are causing.

Reddit user Vintspect_48 shared a comprehensive account of the new sideloading restrictions and their experience with them. The impact of Google’s new developer verification rules extends beyond sketchier off-market apps — it also affects apps hosted on platforms like GitHub and F-Droid, as well as community-patched applications like Morphe. In the case of Morphe, because modified and patch-based apps inevitably alter the APK’s original signing key, the system treats them as unverified and thus halts their installation.

Under the new rules, Android users can install apps without any restrictions from the following app stores:

• Google Play Store
• HONOR App Market
• OPPO App Market
• Samsung Galaxy Store
• Transsion Palm Store
• vivo V-Appstore
• Xiaomi GetApps

Third-party app developers outside the above app stores who have registered for Google’s Android Developer Verification Program will not be restricted, and their apps can be readily installed by users without encumbrance. Apps not distributed through the above stores and whose developers have not registered with Google will be blocked from installation unless users take one of the sideloading steps.

As the Reddit user notes, fellow Android enthusiasts have five viable options to deal with these new developer verification rules:

1. Do nothing: For the vast majority of Android users, these new developer verification rules will have little impact, as they get most of their apps through the Play Store and other app stores. The sideloading steps may also seem too cumbersome to follow for the few apps these users sideload, to the point where it may be easier to switch apps than to learn a few new steps.
2. Google’s Advanced Flow: This is the easiest and most straightforward way to install unverified apps. Users have to merely:
   1. Enable Developer Options on their phone.
   2. In Settings > System > Developer Options, toggle “Apps from Unverified Developers.”
   3. Tap the subsequent system dialog to confirm they are not being coerced.
   4. Restart their phone (this breaks the flow of scammers who may be watching or guiding victims through malware installation).
   5. Wait 24 hours as a mandatory but one-time-per-device waiting period.
   6. Navigate back to Settings > System > Developer Options > Apps from Unverified Developers, scroll past additional warnings, reauthenticate with their biometrics or PIN, and then select either “Allow temporarily” (for seven days) or “Allow indefinitely.”
   7. Check the box to confirm you understand the risks.
   8. You can now install apps from unverified developers by tapping on the “Install anyway” option in the package manager.
3. ADB: ADB is Google’s second official method for installing apps from unverified developers. There are no waiting restrictions here, nor any reboots needed. You would need to enable USB Debugging in Developer Options to use ADB, but that’s about it. You can install any and all apps through wired or wireless ADB without any constraints or changes in your flow.
4. Shizuku: This is a viable option for savvy users who do not want to wait for 24 hours. Since Shizuku essentially relies on on-device wireless debugging, it can install and update apps from unverified developers, just like ADB.
5. Rooting: This should come as no surprise, but users with root access can also bypass restrictions by using root permissions to install apps. However, the other options are far easier and less cumbersome than rooting, if your goal is just to install apps from unverified developers.

ADB remains the easiest way to install apps from unverified developers, in my opinion. Shizuku comes a close second, while Google’s Advanced Flow is not that bad either, given how frequent and easy it is to fall for scams on Android. Custom ROMs like Lineage OS and GrapheneOS will not adopt Google’s Developer Verifier framework, so they remain exempt as well.

The Reddit user also clarified some concerns from the community:

• Sideloaded apps installed before the restrictions will continue to work and will not be automatically deleted. Once restrictions are in place in your region, these installed apps (from unverified developers) cannot be updated unless you follow one of the steps mentioned above.
• You don’t need to keep Developer Options enabled after completing Google’s Advanced Flow. The restrictions lifted by Advanced Flow remain lifted (temporarily or indefinitely, depending on what you chose) even after you disable Developer Options, so your banking apps will function normally and not give you any alerts or warnings.
• You can use your phone normally during the 24-hour waiting period.

The Reddit user mentions that if you don’t complete Advanced Flow after the 24-hour waiting period, you have to repeat the process (including the waiting). However, Google’s documentation on the process does not mention any expiration window after the 24-hour delay, so treat this unverified information with a pinch of salt.

The Reddit user also uninstalled the Android Developer Verifier app, but they did so while complementing it with Shizuku. As such, it’s still not clear whether uninstalling or disabling the Android Developer Verifier app will stop the 24-hour waiting cooldown — it would be a grave oversight on Google’s part if it did. We don’t have the restrictions active on our devices to test either way, but after speaking with a few developers, uninstalling the Android Developer Verifier app is unlikely to affect the 24-hour delay or the restrictions themselves (which are most likely handled by Google Play Services via Play Protect). If you want to bypass the restrictions, your best option remains the methods listed above.

If the restrictions do not apply to your region, you don’t have to do anything right now either, as the sky isn’t falling yet. Google’s phased rollout gives the company time to assimilate any feedback from users and developers. Most users are unlikely to ever come across these restrictions — and if they do, most would be thankful they didn’t get caught in a scam. For power users, the way out is very straightforward in my eyes — if you aren’t familiar with ADB, you probably shouldn’t be installing random apps from the internet in the first place.